Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

What if want DACS to perform authorization but we don use Apache or can use mod_auth_dacs?

April 26, 2017Apache Authorization DACs mod_auth_dacs perform

0

Posted

What if want DACS to perform authorization but we don use Apache or can use mod_auth_dacs?

1 Answer

0

Posted

Although DACS can currently only be integrated with Apache 2.0/2.2, it is not essential for the web services protected by DACS to be deployed by a DACS-enabled web server or even an Apache web server. In some cases it is impractical or impossible for a site to install, operate, and maintain a web server that directly supports DACS. When access control is delegated to another server, service requests are directed to a DACS-enhanced web server that grants or denies the request. If a request is granted, the server acts as a proxy and forwards the request to the first jurisdiction. One alternative is to add a new server that can run a DACS-enhanced version of Apache on a different host or as a separate Apache server on the same host. DACS-wrapped web service requests would then be directed to this server, where Apache’s “proxy mode” of operation is used, and which runs DACS services and makes access control decisions. Requests that are granted are forwarded to the web server where the serv